Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Vendors
Adobe
Commerce B2b

Adobe Commerce B2b vulnerabilities

Known exploitedIn KEVPublic exploitFix available

adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)CVE-2026-212848.1 HighMarch 11, 2026
adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Incorrect Authorization (CWE-863)CVE-2026-212974.3 MediumMarch 11, 2026
adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Incorrect Authorization (CWE-863)CVE-2026-213594.7 MediumMarch 11, 2026
adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Incorrect Authorization (CWE-863)CVE-2026-213097.5 HighMarch 11, 2026
adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)CVE-2026-212925.4 MediumMarch 11, 2026
adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Improper Input Validation (CWE-20)CVE-2026-213105.3 MediumMarch 11, 2026
adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Incorrect Authorization (CWE-863)CVE-2026-212854.3 MediumMarch 11, 2026
adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)CVE-2026-212908.7 HighMarch 11, 2026
adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Incorrect Authorization (CWE-863)CVE-2026-212897.5 HighMarch 11, 2026
adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)CVE-2026-213618.1 HighMarch 11, 2026
adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)CVE-2026-213606.8 MediumMarch 11, 2026
adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Incorrect Authorization (CWE-863)CVE-2026-212964.3 MediumMarch 11, 2026
adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)CVE-2026-213118.0 HighMarch 11, 2026
adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | URL Redirection to Untrusted Site ('Open Redirect') (CWE-601)CVE-2026-212953.1 LowMarch 11, 2026
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Incorrect Authorization (CWE-863)CVE-2025-54267Fix available6.5 MediumOctober 14, 2025
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)CVE-2025-54266Fix available4.8 MediumOctober 14, 2025
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Incorrect Authorization (CWE-863)CVE-2025-54263Fix available8.1 HighOctober 14, 2025
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Incorrect Authorization (CWE-863)CVE-2025-54265Fix available5.9 MediumOctober 14, 2025
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)CVE-2025-54264Fix available8.1 HighOctober 14, 2025
adobe commerce, commerce and magento, commerce b2b +1 more +3 moreAdobe Commerce | Improper Input Validation (CWE-20)CVE-2025-54236In KEVPublic exploitEPSS 95.5%9.1 CriticalSeptember 9, 2025
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Incorrect Authorization (CWE-863)CVE-2025-49556Fix available7.5 HighAugust 12, 2025
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)CVE-2025-49557Fix available8.7 HighAugust 12, 2025
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367)CVE-2025-49558Fix available5.9 MediumAugust 12, 2025
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Improper Input Validation (CWE-20)CVE-2025-49554Fix available7.5 HighAugust 12, 2025
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)CVE-2025-49559Fix available5.3 MediumAugust 12, 2025
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Cross-Site Request Forgery (CSRF) (CWE-352)CVE-2025-49555Fix available8.1 HighAugust 12, 2025
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Incorrect Authorization (CWE-863)CVE-2025-49550Fix available4.3 MediumJune 25, 2025
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Incorrect Authorization (CWE-863)CVE-2025-49549Fix available2.7 LowJune 25, 2025
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Improper Access Control (CWE-284)CVE-2025-27206Fix available5.3 MediumJune 10, 2025
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Improper Access Control (CWE-284)CVE-2025-435868.1 HighJune 10, 2025
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)CVE-2025-47110Fix available8.4 HighJune 10, 2025
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Improper Authorization (CWE-285)CVE-2025-43585Fix available8.2 HighJune 10, 2025
adobe commerce, commerce b2b +1 moreAdobe Commerce | Improper Access Control (CWE-284)CVE-2025-272076.5 MediumJune 10, 2025
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Improper Access Control (CWE-284)CVE-2025-27190Fix available5.3 MediumApril 8, 2025
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Improper Access Control (CWE-284)CVE-2025-27191Fix available5.3 MediumApril 8, 2025
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Insufficiently Protected Credentials (CWE-522)CVE-2025-27192Fix available2.7 LowApril 8, 2025
adobe commerce, commerce b2b +1 moreAdobe Commerce | Cross-Site Request Forgery (CSRF) (CWE-352)CVE-2025-271894.3 MediumApril 8, 2025
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Incorrect Authorization (CWE-863)CVE-2025-27188Fix available4.3 MediumApril 8, 2025
adobe commerce, commerce b2b +1 moreAdobe Commerce | Improper Access Control (CWE-284)CVE-2025-244226.5 MediumFebruary 11, 2025
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)CVE-2025-24414Fix available8.7 HighFebruary 11, 2025
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Incorrect Authorization (CWE-863)CVE-2025-24437Fix available5.4 MediumFebruary 11, 2025
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Incorrect Authorization (CWE-863)CVE-2025-24434Fix availableEPSS 17.2%9.1 CriticalFebruary 11, 2025
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)CVE-2025-24415Fix available8.7 HighFebruary 11, 2025
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Improper Access Control (CWE-284)CVE-2025-24411Fix available8.1 HighFebruary 11, 2025
adobe commerce, commerce b2b +1 moreAdobe Commerce | Incorrect Authorization (CWE-863)CVE-2025-244204.3 MediumFebruary 11, 2025
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)CVE-2025-24416Fix available8.7 HighFebruary 11, 2025
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)CVE-2025-24413Fix available8.7 HighFebruary 11, 2025
adobe commerce, commerce b2b +1 moreAdobe Commerce | Incorrect Authorization (CWE-863)CVE-2025-244194.3 MediumFebruary 11, 2025
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367)CVE-2025-24432Fix available3.7 LowFebruary 11, 2025
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367)CVE-2025-24430Fix available3.7 LowFebruary 11, 2025
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open